News for hackers. Stuff that matters.
Re:Intent to issue €2.5M fine to Disqus over GDPR breaches by Moto7451 on Thursday May 06, 2021 @09:39AM (#27063028)
Another technique is to run a stripped down version of your site with whatever content/functionality fits into the GDPR. Set your log retention to under a month (not a GDPR requirement, just a tactic that makes compliance easier), redact sensitive information under the GDPR, ask for consent, offer DSAR tools if applicable, etc.

I noticed this being employed by some media sites when I was vacationing in Europe. No Discus comments, no account creation or login, just articles and banner ads. The sites loaded so much faster. I’ve done similar things at work when building out privacy law compliance. It’s a good pattern if you don’t need one to one feature equivalency between your US and EEA/GB presence.

Re:Intent to issue €2.5M fine to Disqus over GDPR breaches by erik_seaberg on Thursday May 06, 2021 @08:36PM (#27070590)
Deleting code isn’t enough to make you compliant, you also have to hire specialists to carry out slow processes required by the GDPR.